For a new AMP user, the fields that are required are:
1) current password for 'admin' (the user password it asks for changes to reflect current user making the change, so for me it'd be 'rob')
2) username
3) password - MUST be at least 8 characters, must have an Upper, a Lower, a number, and a special char. If it doesn't meet all 5 requirements, then you should see a message return of "Password must be at least 8 characters with a mix of upper, lower, numeric, and non-alphanumeric characters."
4) confirm password: must match password above
Name/Email/Phone/Notes are optional fields
For VRF, the role should already be in read only if it's the AMP default read only role. Otherwise you can set VisualRF to read only on the AMP Setup -> Role page.